Privacy Notice for Professionals

Vastoco Private Limited is the data fiduciary for your personal data under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). This notice is for professionals and is read together with our general Privacy Policy.

Vastoco Private Limited, CIN U63122UW2026PTC259452, registered office at 38, Lokendra Puri, Gari Bhadauriya, Agra, Uttar Pradesh 282002, India. General contact: info@vastoco.in. Grievances and privacy requests: grievance@vastoco.in.

• Account and profile: name, email, mobile or WhatsApp number, photo, biography, category, experience, education, languages, service areas, pricing, availability and portfolio.
• Verification: identity and credential documents, Council of Architecture registration number, degree, diploma or certificate details, issuing authority, dates and the review outcome.
• Payout and tax: bank details for payouts, which are collected by our payment partner, PAN, GSTIN where applicable, invoices and payout records.
• Consultation records: leads, bookings, Outcome Summaries, communications and complaints.
• Usage and technical data: profile analytics, IP address, device and browser details and security logs.

• Public: the profile information you choose to publish, such as name, photo, category, biography, portfolio, service area, experience, pricing, availability, reviews and your verification badge. Search engines may index it.
• Private: identity and credential documents, document numbers, internal verification notes, bank details, PAN and your private contact details, unless you choose to publish them.

• To verify your identity and credentials and to manage renewal reminders.
• To publish your profile, rank you in search and match you with clients.
• To run consultations, collect payments, release payouts and meet tax duties.
• To send service messages and, only with your consent, marketing.
• To prevent fraud, handle complaints, moderate content and meet legal duties.

• For Architects, we look up your name and registration number in the Council of Architecture's public record.
• For Interior Designers and Vastu Consultants, we review the document you upload. If we ever need to confirm a document with the issuing institution, we will tell you first.
• A person at Vastoco makes every verification decision. Documents are stored in private, access-controlled storage and are not used to train general-purpose AI models.

Clients see your public profile. Our payment partner Razorpay receives the details it needs to pay you. We use service providers for hosting, storage, database, messaging and email, and they may use your data only to provide that service to us. We may disclose data to tax authorities, courts, regulators and professional bodies when the law requires. We do not sell your data. See our Privacy Policy for the full list of providers.

Once a client shares their details with you, you are responsible for protecting them. Use them only for that consultation or project, do not share or sell them, and delete them when you no longer need them.

• Account and profile data is kept while your account is active and during deletion.
• Verification documents are kept for the life of your account and up to two years after it closes, unless the law or a dispute requires longer.
• Your licence number, issuing authority, verification outcome and expiry dates may be kept to manage renewals and verification history.
• Booking, payout, invoice and tax records are kept for as long as tax, accounting and consumer law require.

• Ask for a summary of the personal data we hold about you.
• Ask us to correct or complete it, or to erase it where we have no legal reason to keep it.
• Withdraw consent for optional uses, such as marketing.
• Nominate a person to exercise your rights if you die or cannot act, and make a complaint.

Write to grievance@vastoco.in from your registered email. We aim to reply within 30 days.

Vastoco is for people aged 18 and over. We do not knowingly collect data from children.

We use HTTPS, access controls, private storage for documents and limited staff access. If a personal data breach happens, we will inform affected people and the Data Protection Board of India as the law requires.

We may update this notice when our services or the law change. The new effective date will be shown at the top. We will give reasonable notice of a material change, and where the law requires your fresh consent we will ask for it. A change does not reduce any right you already have under the law.

If you have a complaint about this document, your data or how you were treated on Vastoco, write to our Grievance Officer. You can also use the Grievance Redressal page to see the full process and where to escalate.